>We run postfix 2.1.5_1,1 on FreeBSD 5.2.1, and use some RBL lists:
>smtpd_recipient_restrictions =
>...
>   reject_rbl_client opm.blitzed.org,
>   reject_rbl_client list.dsbl.org,
>   reject_rbl_client proxies.relays.monkeys.com,
>   reject_rbl_client relays.ordb.org,
>   reject_rbl_client bl.spamcop.net,
>   reject_rbl_client sbl.spamhaus.org
>We are seeing cases where mail is rejected because of the RBL lists, even
>when a sender is whitelisted in a recipient's SA user_prefs file.
>Is there any way to reverse the order of operations so that postfix
>doesn't check with the RBL list when SA says a sender is OK?

You can't reverse the checks, but you can whitelist addresses in Postfix.
I use the check_client_access to allow certain domains/ips to send mail
although they appear in RBL's. Just put them in the access-file with 'OK'
on the end of the line. You can do the same with check_sender_access.
And make sure this check is done before the RBL checks, like:
smtpd_recipient_restrictions = reject_non_fqdn_sender,
  reject_non_fqdn_recipient,
  permit_mynetworks,
  reject_unauth_destination,
  check_client_access hash:/etc/postfix/client_access,
  check_helo_access hash:/etc/postfix/helo_access,
  check_sender_access hash:/etc/postfix/sender_access,
  reject_rbl_client dynablock.njabl.org,
  reject_rbl_client dul.dnsbl.sorbs.net,
  reject_rbl_client cbl.abuseat.org

Regards
Menno van Bennekom

Reply via email to